Technical Tip: How to prefer the route as per the sdwan rules instead of the static routes for the TACACS+ traffic initiated by the FortiGate

Tacacs+ authentication is self-originating traffic and by default, it relies on routing table lookups to determine the egress interface that is used to initiate the connection. 

For Tacacs configuration, there are three interface selection methods:

• auto: Set outgoing interface automatically.
• sdwan: Set outgoing interface by SD-WAN or policy routing rules.
• specify: Set the outgoing interface manually.

Note:

The default interface selection method is set to auto.

Prefer SD-WAN rules for Tacacs by using the following commands on the CLI:

config user tacacs+
  edit <server name>
    set interface-select-method sdwan
  next
end